CVE-2020-8288

2021-01-2618:16:08

Google

osv.dev

5.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

29.6%

JSON

The specializedRendering function in Rocket.Chat server before 3.9.2 allows a cross-site scripting (XSS) vulnerability by way of the value parameter.

CPENameOperatorVersion
rocket.chateq0.74.0
rocket.chateq3.0.0-rc.5
rocket.chateq0.55.0-rc.6
rocket.chateq3.7.0
rocket.chateq3.1.0-rc.9
rocket.chateq3.8.0-rc.4
rocket.chateq1.3.0-rc.0
rocket.chateq3.1.0-rc.3
rocket.chateq3.4.2
rocket.chateq0.63.1

Name	Operator	Version
rocket.chat	eq	0.74.0
rocket.chat	eq	3.0.0-rc.5
rocket.chat	eq	0.55.0-rc.6
rocket.chat	eq	3.7.0
rocket.chat	eq	3.1.0-rc.9
rocket.chat	eq	3.8.0-rc.4
rocket.chat	eq	1.3.0-rc.0
rocket.chat	eq	3.1.0-rc.3
rocket.chat	eq	3.4.2
rocket.chat	eq	0.63.1